It is not "smoking gun", it is not scientific, it is not even "study". This is more likely screaming "fire!" in theatre. Also what you suggested is not symmetr

It is not "smoking gun", it is not scientific, it is not even "study". This is more likely screaming "fire!" in theatre. Also what you suggested is not symmetric, let me explain: - There is a claim tiktok is downloading some zip file, extracting and executing. making this claim is almost free, for me to claim otherwise, requires to reverse engineer all the app, then check 100s of possibilities to execute code in android app. For example I took a quick look, and couldn't find anything related to this claim. Also I checked reports from some "security" companies, there is nothing concrete there too. Mostly they talk about some SDK from appsflyer, which is used by a lot of apps, getting a lot of data, including IMSI etc (which is a US company btw) But if you still ask me if it is running downloaded code, I cannot say 100% certain "no". I believe claims should need proof, not the other way around.